upgrade CI from Go 1.25.5 to 1.25.6

2026-02-14 10:00:05 +00:00 · 2026-01-21 10:28:36 -08:00
parent c0a81c82b0
commit aef74185c3
20 changed files with 40 additions and 40 deletions
--- a/dockerfiles/code-coverage-uploader/Dockerfile
+++ b/dockerfiles/code-coverage-uploader/Dockerfile
@@ -1,4 +1,4 @@
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 # For running Go linters
@@ -9,6 +9,6 @@ RUN apt-get update && apt-get install -y curl && rm -rf /var/lib/apt/lists/*
 RUN curl -sfLo /tmp/codecov https://uploader.codecov.io/latest/linux/codecov
 RUN chmod +x /tmp/codecov

-FROM golang:1.25.5
+FROM golang:1.25.6
 RUN apt-get update -y && apt-get dist-upgrade -y
 COPY --from=builder /tmp/codecov /usr/local/bin/codecov
--- a/dockerfiles/crane/Dockerfile
+++ b/dockerfiles/crane/Dockerfile
@@ -1,10 +1,10 @@
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 FROM gcr.io/go-containerregistry/crane as crane
 FROM mikefarah/yq:4.50.1 AS yq

-FROM golang:1.25.5
+FROM golang:1.25.6
 COPY --from=yq /usr/bin/yq /usr/local/bin
 COPY --from=crane /ko-app/crane /usr/local/bin
 ENTRYPOINT ["bash"]
--- a/dockerfiles/gh-cli/Dockerfile
+++ b/dockerfiles/gh-cli/Dockerfile
@@ -1,4 +1,4 @@
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 # For running the GitHub CLI.
@@ -11,5 +11,5 @@ RUN curl \
    https://github.com/cli/cli/releases/download/v2.40.0/gh_2.40.0_linux_amd64.tar.gz \
    && tar -C /tmp --strip-components=1 -xzvf /tmp/gh.tar.gz

-FROM golang:1.25.5
+FROM golang:1.25.6
 COPY --from=builder /tmp/bin/gh /usr/local/bin/gh
--- a/dockerfiles/integration-test-runner-beta/Dockerfile
+++ b/dockerfiles/integration-test-runner-beta/Dockerfile
@@ -1,4 +1,4 @@
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 # For running the integration tests as a client to a k8s cluster
@@ -36,7 +36,7 @@ RUN google-chrome --version

 # Install Go. The download URL that can be used below for any version of Go can be found on https://go.dev/dl/
 ENV PATH /usr/local/go/bin:$PATH
-RUN curl -fsSL https://go.dev/dl/go1.25.5.linux-amd64.tar.gz -o /tmp/go.tar.gz && \
+RUN curl -fsSL https://go.dev/dl/go1.25.6.linux-amd64.tar.gz -o /tmp/go.tar.gz && \
    tar -C /usr/local -xzf /tmp/go.tar.gz && \
    rm /tmp/go.tar.gz && \
    go version
--- a/dockerfiles/integration-test-runner/Dockerfile
+++ b/dockerfiles/integration-test-runner/Dockerfile
@@ -1,4 +1,4 @@
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 # For running the integration tests as a client to a k8s cluster
@@ -36,7 +36,7 @@ RUN google-chrome --version

 # Install Go. The download URL that can be used below for any version of Go can be found on https://go.dev/dl/
 ENV PATH /usr/local/go/bin:$PATH
-RUN curl -fsSL https://go.dev/dl/go1.25.5.linux-amd64.tar.gz -o /tmp/go.tar.gz && \
+RUN curl -fsSL https://go.dev/dl/go1.25.6.linux-amd64.tar.gz -o /tmp/go.tar.gz && \
    tar -C /usr/local -xzf /tmp/go.tar.gz && \
    rm /tmp/go.tar.gz && \
    go version
--- a/dockerfiles/test-cfssl/Dockerfile
+++ b/dockerfiles/test-cfssl/Dockerfile
@@ -1,4 +1,4 @@
-# Copyright 2021-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2021-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 # The cfssl/cfssl container image on dockerhub is built poorly.
@@ -11,7 +11,7 @@ FROM cfssl/cfssl:v1.6.5 as cfssl

 # We just need any basic unix with bash, but we can pick the same
 # base image that they use, just in case they did any dynamic linking.
-FROM golang:1.25.5
+FROM golang:1.25.6

 # Thier Docerfile https://github.com/cloudflare/cfssl/blob/master/Dockerfile
 # calls their Makefile https://github.com/cloudflare/cfssl/blob/master/Makefile
--- a/pipelines/dockerfile-builders/pipeline.yml
+++ b/pipelines/dockerfile-builders/pipeline.yml
@@ -1,4 +1,4 @@
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 display:
@@ -38,7 +38,7 @@ meta:
  # These version numbers should be updated periodically.
  codegen-versions: &codegen-versions
    # Choose which version of Golang to use in the codegen container images.
-    BUILD_ARG_GO_VERSION: '1.25.5'
+    BUILD_ARG_GO_VERSION: '1.25.6'
    # Choose which version of sigs.k8s.io/controller-tools/cmd/controller-gen to install
    # in the codegen container images.
    BUILD_ARG_CONTROLLER_GEN_VERSION: 0.20.0
--- a/pipelines/pull-requests/pipeline.yml
+++ b/pipelines/pull-requests/pipeline.yml
@@ -1,4 +1,4 @@
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 display:
@@ -572,7 +572,7 @@ jobs:
            type: registry-image
            source:
              repository: golang
-              tag: '1.25.5'
+              tag: '1.25.6'
          inputs:
            - name: pinniped-pr
          outputs:
--- a/pipelines/shared-helpers/test-binaries-image/Dockerfile
+++ b/pipelines/shared-helpers/test-binaries-image/Dockerfile
@@ -1,9 +1,9 @@
 # syntax = docker/dockerfile:experimental

-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

-FROM golang:1.25.5-bookworm as build-env
+FROM golang:1.25.6-bookworm as build-env
 WORKDIR /work
 COPY . .
 ARG GOPROXY
--- a/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips
+++ b/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips
@@ -1,12 +1,12 @@
 # syntax = docker/dockerfile:experimental

-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 # we need a separate dockerfile for the fips test image so that the integration tests
 # use the right ciphers etc.

-FROM golang:1.25.5-bookworm as build-env
+FROM golang:1.25.6-bookworm as build-env
 WORKDIR /work
 COPY . .
 ARG GOPROXY
--- a/pipelines/shared-tasks/build-cli-binaries/task.yml
+++ b/pipelines/shared-tasks/build-cli-binaries/task.yml
@@ -1,4 +1,4 @@
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 ---
@@ -7,7 +7,7 @@ image_resource:
  type: registry-image
  source:
    repository: golang
-    tag: '1.25.5'
+    tag: '1.25.6'
 inputs:
  - name: pinniped
  - name: pinniped-ci
--- a/pipelines/shared-tasks/confirm-built-with-fips/task.yml
+++ b/pipelines/shared-tasks/confirm-built-with-fips/task.yml
@@ -1,4 +1,4 @@
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 ---
@@ -10,6 +10,6 @@ image_resource:
  type: registry-image
  source:
    repository: golang
-    tag: '1.25.5'
+    tag: '1.25.6'
 run:
  path: pinniped-ci/pipelines/shared-tasks/confirm-built-with-fips/task.sh
--- a/pipelines/shared-tasks/confirm-version/task.yml
+++ b/pipelines/shared-tasks/confirm-version/task.yml
@@ -1,4 +1,4 @@
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 ---
@@ -10,7 +10,7 @@ image_resource:
  type: registry-image
  source:
    repository: golang
-    tag: '1.25.5'
+    tag: '1.25.6'
 run:
  # Confirm that the correct git sha was baked into the executables and that they log the version as their
  # first line of output. Do this by directly running the server binary from the rootfs of the built image.
--- a/pipelines/shared-tasks/format-release/task.yml
+++ b/pipelines/shared-tasks/format-release/task.yml
@@ -1,4 +1,4 @@
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 ---
@@ -7,7 +7,7 @@ image_resource:
  type: registry-image
  source:
    repository: golang
-    tag: '1.25.5'
+    tag: '1.25.6'
 inputs:
  - name: pinniped
  - name: release-semver
--- a/pipelines/shared-tasks/run-go-vuln-scan/task.yml
+++ b/pipelines/shared-tasks/run-go-vuln-scan/task.yml
@@ -1,4 +1,4 @@
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 ---
@@ -7,7 +7,7 @@ image_resource:
  type: registry-image
  source:
    repository: golang
-    tag: '1.25.5'
+    tag: '1.25.6'
 inputs:
  - name: pinniped
  - name: pinniped-ci
--- a/pipelines/shared-tasks/run-unit-tests/task.yml
+++ b/pipelines/shared-tasks/run-unit-tests/task.yml
@@ -1,4 +1,4 @@
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 ---
@@ -7,7 +7,7 @@ image_resource:
  type: registry-image
  source:
    repository: golang
-    tag: '1.25.5'
+    tag: '1.25.6'
 inputs:
  - name: pinniped
  - name: pinniped-ci
--- a/pipelines/shared-tasks/run-verify-go-generate/task.yml
+++ b/pipelines/shared-tasks/run-verify-go-generate/task.yml
@@ -1,4 +1,4 @@
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 ---
@@ -7,7 +7,7 @@ image_resource:
  type: registry-image
  source:
    repository: golang
-    tag: '1.25.5'
+    tag: '1.25.6'
 inputs:
  - name: pinniped
  - name: pinniped-ci
--- a/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml
+++ b/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml
@@ -1,4 +1,4 @@
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 ---
@@ -7,7 +7,7 @@ image_resource:
  type: registry-image
  source:
    repository: golang
-    tag: '1.25.5'
+    tag: '1.25.6'
 inputs:
  - name: pinniped
  - name: pinniped-ci
--- a/pipelines/shared-tasks/run-verify-lint/task.yml
+++ b/pipelines/shared-tasks/run-verify-lint/task.yml
@@ -1,4 +1,4 @@
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 ---
@@ -7,7 +7,7 @@ image_resource:
  type: registry-image
  source:
    repository: golang
-    tag: '1.25.5'
+    tag: '1.25.6'
 inputs:
  - name: pinniped
  - name: pinniped-ci
--- a/pipelines/shared-tasks/update-version-and-cli-docs/task.yml
+++ b/pipelines/shared-tasks/update-version-and-cli-docs/task.yml
@@ -1,4 +1,4 @@
-# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2026 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0

 ---
@@ -7,7 +7,7 @@ image_resource:
  type: registry-image
  source:
    repository: golang
-    tag: '1.25.5'
+    tag: '1.25.6'
 inputs:
  - name: pinniped-ci
  - name: github-final-release